Look out! That's a bad start.

1. Your security clearance gives you approved access only to that classified information at the same or lower level of classification as the level of the clearance granted, and that you have a "need-to-know" in order to perform your work. 

Need-to-know is one of the most fundamental security principles. The practice of need-to-know limits the damage that can be done by a trusted insider who goes bad. Failures in implementing the need-to-know principle have contributed greatly to the damage caused by a number of recent espionage cases.

Need-to-know imposes a dual responsibility on you and all other authorized holders of classified information:

• When doing your job, you are expected to limit your questions or requests for information to that which you have a genuine need-to-know.

• Conversely, you are expected to ensure that anyone to whom you give classified information has a legitimate need to know that information. You are obliged to ask the other person for sufficient information to enable you to make an informed decision about their need-to-know, and the other person is obliged to justify their need-to-know.

Need-to-know is difficult to implement as it conflicts with our natural desire to be friendly and helpful. Its importance is underscored, however, every time a person who is or has been a trusted, cleared insider is arrested for espionage.

Related Topics: Need-to-Know, Handling Classified Information, Protecting Sensitive Unclassified Information.